PT-2026-78634 · Ibm · Ibm Powervm Hypervisor

CVE-2026-18821

·

Published

2026-08-19

·

Updated

2026-08-22

CVSS v3.1

8.8

High

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor version FW1120.00 IBM PowerVM Hypervisor versions FW1110.00 through FW1110.30 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.80 IBM PowerVM Hypervisor versions FW950.00 through FW950.H2
Description A flaw exists in the partition firmware during the network boot process. An unauthenticated attacker located on the same network as a partition performing a network boot can send a malformed packet to execute arbitrary code within the partition firmware. This action can compromise all subsequent components loaded by that partition. This issue only affects partitions actively undergoing network boot; other partitions and the managed system remain unaffected.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-18821

Affected Products

Ibm Powervm Hypervisor